Page MenuHomeFreeBSD

Fix broken STARTTLS when SharedMemoryKey is enabled
ClosedPublic

Authored by hrs on Feb 17 2020, 7:33 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Apr 14, 1:32 AM
Unknown Object (File)
Sun, Apr 14, 12:42 AM
Unknown Object (File)
Mar 1 2024, 6:21 AM
Unknown Object (File)
Dec 22 2023, 12:07 AM
Unknown Object (File)
Dec 20 2023, 4:03 AM
Unknown Object (File)
Oct 30 2023, 4:29 PM
Unknown Object (File)
Oct 13 2023, 5:54 PM
Unknown Object (File)
Jun 10 2023, 1:44 PM
Subscribers

Details

Summary

OpenSSL 1.1 API patch for sendmail has a bug which
prevents sm_RSA_generate_key() function from working.
This function is used to generate a temporary RSA key
for a shared memory region used for TLS processing.
Note that 12.0 and 12.1-RELEASE include this bug.

To trigger this bug, SM_CONF_SHM compile-time
option (enabled by default) and SharedMemoryKey
run-time option (not enabled by default) in a .cf file
are required. The latter corresponds to
confSHARED_MEMORY_KEY in a .mc file. See also Bug 242861.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable